CVE-2018-7662

2018-03-0423:00:00

mitre

www.cve.org

cve-2018-7662

couch

remote

path disclosure

direct request

full path

AI Score

5.2

Confidence

High

EPSS

0.003

Percentile

69.4%

JSON

Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php.

References

github.com/CouchCMS/CouchCMS/issues/46